hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-03 12:45:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

Ruby: Use Receiver instead of Argument[-1] in ActiveStorage

Browse Source
This commit is contained in:
Asger Feldthaus
2022-03-16 12:36:45 +01:00
parent 71f195d1e0
commit c9355095e3
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ruby/ql/lib/codeql/ruby/frameworks/ActiveStorage.qll
View File

@@ -24,7 +24,7 @@ private class Summaries extends ModelInput::SummaryModelCsv {
row =
[
"activestorage;;Member[ActiveStorage].Member[Filename].Method[new];Argument[0];ReturnValue;taint",
"activestorage;;Member[ActiveStorage].Member[Filename].Instance.Method[sanitized];Argument[-1];ReturnValue;taint",
"activestorage;;Member[ActiveStorage].Member[Filename].Instance.Method[sanitized];Receiver;ReturnValue;taint",
]
}
}